2023-04-21 13:25:09 +00:00
{
"Event" : {
"analysis" : "2" ,
"date" : "2020-01-07" ,
"extends_uuid" : "" ,
"info" : "OSINT - Spam via mobile phone" ,
"publish_timestamp" : "1578407441" ,
"published" : true ,
"threat_level_id" : "3" ,
"timestamp" : "1578407416" ,
"uuid" : "5e149458-bdf4-4f6a-8e1c-8f1102de0b81" ,
"Orgc" : {
"name" : "CIRCL" ,
"uuid" : "55f6ea5e-2c60-40e5-964f-47a8950d210f"
} ,
"Tag" : [
{
"colour" : "#509f00" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "circl:incident-classification=\"scam\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#004646" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "type:OSINT" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#0071c3" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "osint:lifetime=\"perpetual\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#0087e8" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "osint:certainty=\"50\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#ffffff" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "tlp:white" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#0088cc" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "misp-galaxy:financial-fraud=\"Vishing\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
}
] ,
"Attribute" : [
{
"category" : "Financial fraud" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1578407043" ,
"to_ids" : true ,
"type" : "phone-number" ,
"uuid" : "5e149483-95c4-46dc-8175-4add02de0b81" ,
"value" : "+4917071524639"
} ,
{
"category" : "Financial fraud" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1578407049" ,
"to_ids" : true ,
"type" : "phone-number" ,
"uuid" : "5e149489-9f8c-4ed9-947c-4bb002de0b81" ,
"value" : "+33606117967"
} ,
{
"category" : "External analysis" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1578407087" ,
"to_ids" : false ,
"type" : "link" ,
"uuid" : "5e1494af-98cc-4fa7-b699-8f2202de0b81" ,
"value" : "https://who-calls.me.uk/phone/08081896207"
} ,
{
"category" : "Financial fraud" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1578407415" ,
"to_ids" : true ,
"type" : "phone-number" ,
"uuid" : "5e1495f7-7e3c-426a-ab56-460802de0b81" ,
"value" : "+448081896207"
}
] ,
"Object" : [
{
"comment" : "" ,
"deleted" : false ,
"description" : "Microblog post like a Twitter tweet or a post on a Facebook wall." ,
"meta-category" : "misc" ,
"name" : "microblog" ,
"template_uuid" : "8ec8c911-ddbe-4f5b-895b-fbff70c42a60" ,
"template_version" : "10" ,
"timestamp" : "1578407390" ,
"uuid" : "5e14956e-c830-4caa-b8b3-46a802de0b81" ,
"ObjectReference" : [
{
"comment" : "" ,
"object_uuid" : "5e14956e-c830-4caa-b8b3-46a802de0b81" ,
"referenced_uuid" : "5e149483-95c4-46dc-8175-4add02de0b81" ,
"relationship_type" : "includes" ,
"timestamp" : "1578407343" ,
"uuid" : "5e1495af-bb3c-4793-838e-4f8602de0b81"
} ,
{
"comment" : "" ,
"object_uuid" : "5e14956e-c830-4caa-b8b3-46a802de0b81" ,
"referenced_uuid" : "5e149489-9f8c-4ed9-947c-4bb002de0b81" ,
"relationship_type" : "includes" ,
"timestamp" : "1578407365" ,
"uuid" : "5e1495c5-5218-4c2b-8c12-8f2302de0b81"
} ,
{
"comment" : "" ,
"object_uuid" : "5e14956e-c830-4caa-b8b3-46a802de0b81" ,
"referenced_uuid" : "5e1494af-98cc-4fa7-b699-8f2202de0b81" ,
"relationship_type" : "includes" ,
"timestamp" : "1578407390" ,
"uuid" : "5e1495de-6114-4165-b860-8f2302de0b81"
}
] ,
"Attribute" : [
{
"category" : "Other" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : true ,
"object_relation" : "type" ,
"timestamp" : "1578407279" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "5e14956f-8074-4f08-9427-46a802de0b81" ,
"value" : "Twitter"
} ,
{
"category" : "Other" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "post" ,
"timestamp" : "1578407284" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "5e149574-5d60-4fbc-aed0-46a802de0b81" ,
"value" : "Weird stuff happening on my phone. Call from German number, then from a French number. Both left voice mails with a robot voice reading out some numbers.\r\n\r\nA phone number verification service?\r\n\r\nAnyone recognise them? \r\n\u00f0\u0178\u2021\u00a9\u00f0\u0178\u2021\u00aa +4917071524639\r\n\u00f0\u0178\u2021\u00ab\u00f0\u0178\u2021\u00b7 +33606117967"
} ,
{
"category" : "External analysis" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "link" ,
"timestamp" : "1578407284" ,
"to_ids" : false ,
"type" : "link" ,
"uuid" : "5e149574-e274-4c99-961a-46a802de0b81" ,
"value" : "https://twitter.com/edent/status/1214494432046800896"
} ,
{
"category" : "Other" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "verified-username" ,
"timestamp" : "1578407284" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "5e149574-d618-4224-84bf-46a802de0b81" ,
"value" : "Verified"
} ,
{
"category" : "Other" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : true ,
"object_relation" : "state" ,
"timestamp" : "1578407284" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "5e149574-6690-46ee-a413-46a802de0b81" ,
"value" : "Informative"
}
]
}
]
}
}
